Tony Vaughan (Progress Software) asked a question.
Release Date: 27 July 2026
Release Versions
- GA: 7.2.63.3
- LTSF: 7.2.54.19
Security Updates
Fix for CVE-2026-59686
Fixed an OS Command Injection vulnerability that allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the management interface, potentially resulting in complete system compromise.
Refer to the CVE details for more information.
Fix for CVE-2026-59687
Fixed an OS Command Injection vulnerability that allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the Geo Location management interface, potentially resulting in complete system compromise.
Refer to the CVE details for more information.
Fix for CVE-2026-59688
Fixed an OS Command Injection vulnerability that allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the backup restore functionality, potentially resulting in complete system compromise.
Refer to the CVE details for more information.
Fix for CVE-2026-59689
An incorrect authorization vulnerability allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.
Refer to the CVE details for more information.
Fix for CVE-2026-59690
A missing authorization vulnerability allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.
Refer to the CVE details for more information.
Links
GA release notes and documentation
LTSF release notes and documentation